CVE-2026-64530

In the Linux kernel, CVE-2026-64530 affects the net/sched cls_api path, specifically tcf_qevent_handle and tcf_classify, where returning TC_ACT_CONSUMED could leave the skb touchable after defragmentation (e.g., act_ct on out-of-order fragments). The defect allowed RED qdisc handling (qe_mark, qe...

CVE-2026-64530

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsapi: Handle TCACTCONSUMED in tcfqeventhandle tcfclassify can return TCACTCONSUMED while the skb is held by the defragmentation engine e.g. actct on out-of-order fragments. When that happens the skb is no longer owne...